Design And Implementation Of Host Intrusion Detection System Based On Data Mining

Since the appearance of the computer, the technology of information has got a rapid development. With the continuously improvement of the technology of information, we are going into an information age. More people deal with business affairs by Internet. People pay more and more attention to the problem of security of information because of the Internet's open characteristic.The paper at first introduces the background of the study on technology of intrusion detection, actuality of intrusion detection system, secondly, the history of development of that technology, the definition and function of intrusion detection, the foreground of intrusion detection system and the limit of the technology of intrusion detection are introduced, and then some basic definitions and arithmetic on data mining in which we emphasize the analyzing of associated rule are introduced. Lastly, this paper introduces the design and implementation of a host intrusion system based on data mining and we get a summarization of this system and give an advice about prospect. At the part of design and implementation of that system we construct an intrusion detection system based on host by the technology of data mining, and this system can real-timely monitor statuses about processes, file system, CPU, memory, register and network of host and we uses the arithmetic about data mining to analyze data about them, as a result we get some rules which can be matched with rules in pattern warehouse. Lastly, we give an advice on the limit of intrusion detection technology, such as the system's analyzed ability can't satisfy the requirement of the rapid development of net's bandwidth.